<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I sent this to Nigel, but for the record for 44.24.240.173 (I think
you'll have more work to do than I will, if my IP address changes):<br>
<ol>
<li>Inbound established connections: ALLOW</li>
<li>Inbound related connections: ALLOW<br>
</li>
<li>Inbound from 44.0.0.0/8: ALLOW</li>
<li>Inbound from 209.59.217.159: ALLOW</li>
<li>Inbound, the rest: BLACKHOLE<br>
</li>
</ol>
Outbound: ALLOW<br>
<br>
No urgency.<br>
<br>
-- Dean<br>
<br>
<div class="moz-cite-prefix">On 2014-04-25 12:04, Bart Kus wrote:<br>
</div>
<blockquote cite="mid:535AB1A2.1080108@bartk.us" type="cite">As an
update, the inbound filtering was turned off since it caused
problems. We're looking into doing things differently now.
<br>
<br>
Also, I would re-phrase "If you want to be able to reach a
service" to just "let us know what firewall rules you'd like for
your subnet/IP". If you want to define ranges of ports and stuff,
that's fine. Work is on-going to automate this too, so you won't
need to reach out to puny humans.
<br>
<br>
--Bart
<br>
<br>
On 4/24/2014 10:14 PM, Nigel Vander Houwen wrote:
<br>
<blockquote type="cite">Hello All!
<br>
<br>
Tonight myself and the other admins have spent some time working
on improving the firewall implemented at our edge routers to
help improve security and compliance, and I installed them on
both edges a short time ago.
<br>
<br>
We are now at this point implementing a default block of traffic
coming in from the internet at large, unless specifically
exempted.
<br>
<br>
What does this mean for you?
<br>
<ol>
<li>For most things, you should not notice this change at all.
Anything you request from your hamwan connection should work
fine as the response will be related to your connection.
</li>
<li>If you want to be able to reach a service you have on your
hamwan connection from the internet at large, please let
myself or another admin know, and we can add that to the
known exceptions. This is a temporary state until we can get
a web interface for managing your HamWAN DNS and firewall
rules.
</li>
<li>If you do notice any problems, please reach out to us. The
best is via the #hamwan channel on irc.freenode.net, but
email will work as well.
</li>
</ol>
Thanks,
Nigel K7NVH
<br>
</blockquote>
</blockquote>
<br>
</body>
</html>